This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: VfitLFBHWUISzuo2JdBG+msJtFAhLH0ZkcVxqC08UwA= Subject key identifier: E7:A7:90:F8:49:51:37:06:4D:9F:52:17:A8:05:30:6B:CC:96:BC:C9 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 60D42D834116FE8CDE5281CC3F958703B7E71894 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 034E Signing time: Sun 14 Dec 2025 10:11:16 +0000 Manifest this update: Sun 14 Dec 2025 10:06:16 +0000 Manifest next update: Wed 17 Dec 2025 15:12:16 +0000 Files and hashes: 1: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: qIXaRckiQKG0xswP7CQE2F7lj2Z2Dq7HxG39fDu6p2w=) 2: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 3: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 5: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) 6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 15:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d4:2d:83:41:16:fe:8c:de:52:81:cc:3f:95:87:03:b7:e7:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Dec 14 10:06:16 2025 GMT Not After : Dec 17 15:12:16 2025 GMT Subject: CN=E7A790F8495137064D9F5217A805306BCC96BCC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:ee:7e:f5:cf:79:18:d1:1d:53:d0:b2:3e: 22:72:50:e1:94:a7:85:d2:fa:0b:80:ab:ac:99:4a: ac:ae:00:99:5b:69:4a:41:e4:fc:26:26:80:09:61: a1:be:c3:19:1d:b9:6b:c5:1a:43:6b:a3:d0:28:f7: 8f:8c:74:91:7e:0c:21:79:40:33:6e:a4:1e:aa:d4: e1:c1:c9:36:3d:80:6b:1c:9d:d9:5a:2f:50:10:94: fe:69:df:00:b3:3e:88:85:e8:bb:7f:8a:65:75:3b: 8e:7f:b8:11:49:6c:c6:11:31:68:db:9d:68:e6:b6: 7e:7a:25:72:78:64:18:1b:0d:bd:f6:f6:0d:51:37: d3:95:20:20:e3:cc:42:52:f4:a9:65:8c:61:79:16: c0:ef:a9:5b:6d:3c:25:aa:d4:7b:8f:8f:d9:22:12: 83:40:8f:78:4e:05:cd:45:8f:8c:69:7f:d5:cf:75: e2:8e:71:b2:c7:f3:94:b5:1a:e9:02:22:ea:ae:09: d9:62:ef:bc:89:b9:84:8d:9c:6f:51:a9:87:35:a6: 3b:9a:e0:98:d7:21:50:b2:f9:e6:9a:da:4f:68:68: 22:00:9c:db:da:a5:18:20:6f:94:dc:77:c5:16:43: 20:4a:5c:7c:aa:a0:bb:5f:9e:c6:a8:ab:11:58:66: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A7:90:F8:49:51:37:06:4D:9F:52:17:A8:05:30:6B:CC:96:BC:C9 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1c:21:c8:b2:81:2c:28:6d:78:96:ab:21:13:db:6d:b7:a9: 3a:75:ff:f4:ba:28:c0:d1:f6:01:1c:7c:80:f8:21:3c:24:95: d8:46:c7:0a:a6:ef:64:51:01:82:df:37:85:0e:ec:53:39:ef: b7:d0:21:58:e9:13:6a:64:b9:20:e0:91:b4:aa:36:a1:bd:9f: e1:e2:a4:a1:65:8f:ee:22:d5:fa:55:b0:7e:f3:4b:88:84:84: 49:fc:4c:7b:37:4a:c7:e5:08:26:83:0d:92:a4:38:60:ec:6d: 18:62:d2:1f:d9:35:3e:a9:4f:a9:87:a1:7a:60:62:4d:c6:33: 65:f1:de:25:92:93:68:49:30:df:13:6d:fb:bd:30:c5:a7:45: ef:51:e7:7c:00:de:13:59:0b:f4:4e:23:03:50:c5:be:2d:6e: 11:a1:90:ea:7a:7a:5a:02:73:37:67:99:9b:92:00:a4:36:f2: b6:79:07:d6:d1:81:1a:8d:b2:d5:24:57:26:aa:3c:6f:71:47: 4d:69:fb:65:96:55:1f:fb:8b:07:72:09:34:0e:35:e8:8a:ba: 15:85:c7:63:a3:55:5e:4d:ef:f8:06:3f:b9:05:5e:5e:33:6f: a1:60:cb:48:c1:f5:29:b7:a4:92:b1:1e:6a:c2:91:b1:c9:57: ac:b1:5e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNQtg0EW/ozeUoHMP5WHA7fnGJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTEyMTQxMDA2MTZaFw0yNTEyMTcxNTEyMTZaMDMxMTAvBgNV BAMTKEU3QTc5MEY4NDk1MTM3MDY0RDlGNTIxN0E4MDUzMDZCQ0M5NkJDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0e+5+9c95GNEdU9CyPiJyUOGU p4XS+guAq6yZSqyuAJlbaUpB5PwmJoAJYaG+wxkduWvFGkNro9Ao94+MdJF+DCF5 QDNupB6q1OHByTY9gGscndlaL1AQlP5p3wCzPoiF6Lt/imV1O45/uBFJbMYRMWjb nWjmtn56JXJ4ZBgbDb329g1RN9OVICDjzEJS9KlljGF5FsDvqVttPCWq1HuPj9ki EoNAj3hOBc1Fj4xpf9XPdeKOcbLH85S1GukCIuquCdli77yJuYSNnG9RqYc1pjua 4JjXIVCy+eaa2k9oaCIAnNvapRggb5Tcd8UWQyBKXHyqoLtfnsaoqxFYZkxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU56eQ+ElRNwZNn1IXqAUwa8yWvMkwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIcIciygSwobXiWqyET2223qTp1//S6KMDR 9gEcfID4ITwkldhGxwqm72RRAYLfN4UO7FM577fQIVjpE2pkuSDgkbSqNqG9n+Hi pKFlj+4i1fpVsH7zS4iEhEn8THs3SsflCCaDDZKkOGDsbRhi0h/ZNT6pT6mHoXpg Yk3GM2Xx3iWSk2hJMN8Tbfu9MMWnRe9R53wA3hNZC/ROIwNQxb4tbhGhkOp6eloC czdnmZuSAKQ28rZ5B9bRgRqNstUkVyaqPG9xR01p+2WWVR/7iwdyCTQONeiKuhWF x2OjVV5N7/gGP7kFXl4zb6Fgy0jB9Sm3pJKxHmrCkbHJV6yxXpg= -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:09 2025 by rpki-client